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IN THE CLAIMS 

1 . (Original) A method for use in generating digital signatures in an information processing 
system, the system including at least a user device, an intermediary device and a verifier, the method 
comprising the steps of: 

generating in the user device a first digital signature; and 
sending the first digital signature to the verifier; 

wherein the verifier sends the first digital signature to the intermediary device, 
and the intermediary device checks that the first digital signature is a valid digital signature for the 
user device and if the first digital signature is valid generates a second digital signature which is 
returned to the verifier as a signature generated by the user device. 

2. (Currently amended) The method of claim 1 wherein the first digital signature is 
generated using a first secret key associated with a first digital signature protocol , the first digital 
signature protocol having a computational efficiency compatible with computational resources of 
the user device. 

3. (Currently amended) The method of claim 2 wherein the second digital signature is 
generated using a second secret key associated with second digital signature protoco l the second 
digital signature protocol having a computational efficiency lower than that of the first digital 
signature protocol. 

4. (Original) The method of claim 3 wherein an agreement relating to corresponding public 
keys of the first and second digital signature protocols is signed by both the user device and the 
intermediary device and the resulting twice-signed agreement is stored by both the user device and 
the intermediary device. 
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5. (Original) The method of claim 3 wherein the second secret key associated with the 
second digital signature protocol is supplied from the user device to the intermediary device over a 
secure private channel. 

6. (Original) The method of claim 1 wherein the first digital signature comprises a signature 
si on a message m, the signature si being generated using a secret key s' of a key pair (s\ p') 
associated with the user device. 

7. (Original) The method of claim 1 wherein the first digital signature comprises a signature 
^1 on A(/w), where /w is a message and /i is a hash function, the signature ^1 being generated using 
a secret key 5' of a key pair (s\p') associated with the user device. 

8. (Original) The method of claim 3 wherein the verifier upon receipt of the first digital 
signature checks that the first digital signature is a valid digital signature using a first public key 
corresponding to the first secret key. 

9. (Original) The method of claim 1 wherein the second digital signature comprises a 
signature s2 on a message m, the signature s2 being generated using a secret key 5 of a key pair (5, 
p) associated with the user device. 

10. (Original) The method of claim 1 wherein the second digital signature comprises a 
signature s2 on h{m\ where m is a message and A is a hash fiinction, the signature ^2 being generated 
using a secret key 5 of a key pair (5, p) associated with the user device. 

1 1 . (Original) The method of claim 2 wherein the verifier upon receipt of the second digital 
signature checks that the second digital signature is a valid digital signature using a second public 
key corresponding to the second secret key. 
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12. (Original) The method of claim 1 wherein the user device is switchable between a 
normal operating mode and a secure operating mode. 

13. (Original) The method of claim 1 wherein the first digital signature is generated only 
after user verification of the message to be signed. 

14. (Original) The method of claim 1 wherein at least one of first and second secret keys 
used to generate the respective first and second and second digital signatures are stored in an at least 
partially encrypted form on the user device and the intermediary device, respectively. 

15. (Original) The method of claim 1 wherein at least one of first and second secret keys 
used to generate the respective first and second and second digital signatures is configured such that 
a first portion thereof is stored in the user device and a second portion thereof is stored in a storage 
element removable from the user device. 

16. (Original) The method of claim 1 wherein if a user associated with the user device can 
contact the intermediary device and upon providing an access code thereto direct the intermediary 
device not to generate the second digital signature. 

1 7. (Original) The method of claim 1 wherein the intermediary device is configured to wait 
a predetermined delay period between checking that the first digital signature is a valid signature and 
generating the second digital signature which is returned to the verifier. 

18. (Original) The method of claim 1 wherein the user device precomputes a plurality of 
coupons, a given one of the coupons being utilizable to generate the first digital signature. 

19. (Original) The method of claim 1 wherein the user device comprises a mobile telephone. 
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20. (Original) The method of claim 1 wherein the user device comprises a personal digital 
assistant (PDA). 

21. (Original) The method of claim 1 wherein the user device comprises a wearable 
computer. 

22. (Original) An apparatus for use in generating digital signatures in an information 
processing system, the system including at least a user device, an intermediary device and a verifier, 
the apparatus comprising: 

a memory; and 

a processor coupled to the memory, the processor being operative to generate 
in the user device a first digital signature, and to send the first digital signature to the verifier; 

wherein the verifier sends the first digital signature to the intermediary device, 
and the intermediary device checks that the first digital signature is a valid digital signature for the 
user device and if the first digital signature is valid generates a second digital signature which is 
retumed to the verifier as a signature generated by the user device. 

23. (Original) An article of manufacture comprising a machine-readable storage medium 
for storing one or more programs for use in generating digital signatures in an information processing 
system, the system including at least a user device, an intermediary device and a verifier, wherein 
the one or more programs when executed implement the steps of: 

generating in the user device a first digital signature; and 
sending the first digital signature to the verifier; 

wherein the verifier sends the first digital signature to the intermediary device, 
and the intermediary device checks that the first digital signature is a valid digital signature for the 
user device and if the first digital signature is valid generates a second digital signature which is 
retumed to the verifier as a signature generated by the user device. 
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24. (Original) A method for use in generating digital signatures in an information processing 
system, the system including at least a user device, an intermediary device and a verifier, the method 
comprising the steps of: 

receiving in the verifier fi-om the user device a first digital signature; and 
sending the first digital signature fi"om the verifier to the intermediary device; 
wherein the intermediary device checks that the first digital signature is a valid 
digital signature for the user device and if the first digital signature is valid generates a second digital 
signature which is returned to the verifier as a signature generated by the user device. 

25. (Original) A method for use in generating digital signatures in an information processing 
system, the system including at least a user device, an intermediary device and a verifier, the method 
comprising the steps of: 

receiving in the intermediary device a first digital signature generated in the 
user device and sent to the intermediary device fi'om the verifier; 

checking in the intermediary device that the first digital signature is a valid 
digital signature for the user device; and 

if the first digital signature is valid generating a second digital signature which 
is returned to the verifier as a signature generated by the user device. 
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